Rocky 8.x Zimbra Connect to Zimbra internal LDAP externally

From Notes_Wiki

Home > Rocky Linux or CentOS > Rocky Linux 8.x > Email servers > Zimbra > Connect to Zimbra internal LDAP externally

To connect to Zimbra LDAP externally:

  1. Enable access to server via network firewall (OR Cloud firewall)
  2. Enable access to port 389 of Zimbra server via firewalld:
    firewall-cmd --zone=public --add-port=389/tcp --permanent
    firewall-cmd --reload
  3. Then test connectivity to Zimbra LDAP via:
    ldapsearch -x -h <email-server-fqdn-or-ip>:389 -b 'dc=example,dc=com' -D 'uid=saurabh,ou=people,dc=example,dc=com' -W dn,mail
    In above replace username saurabh and domain example.com appropriately. Zimbra LDAP will require authentication for the DN specified with -D, without which it does not responds to ldap queries
    1. In case of confusion on Zimbra LDAP structure we can use:
      su - zimbra
      /opt/zimbra/libexec/zmslapcat -c /tmp
      vim /tmp/ldap.bak
      See CentOS 7.x Zimbra backup and restore
    2. For filters while connecting to Zimbra. See


Various fields while connecting to Zimbra LDAP externally

Host
mail.example:389
Base DN
dc=example,dc=com
Auth DN
uid=saurabh,ou=people,dc=example,dc=com
Password
secret
User Object Class
zimbraAccount
Username
mail OR uid
User Filter
(&(uid=*)(mail=*))

To search for specific user we can use uid=saurabh or mail=saurabh@example.com etc. filters

There are no user groups in Zimbra by default. For grouping use custom groups in application and manually add users to specific groups.


Home > Rocky Linux or CentOS > Rocky Linux 8.x > Email servers > Zimbra > Connect to Zimbra internal LDAP externally